{"uuid": "bd472e83-2b58-4293-8a0e-394dba4bde04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-30003", "type": "seen", "source": "https://t.me/hacking_Attack/68002", "content": "Exploit Collector\nOnline Market Place Site 1.0 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png \nOnline Market Place Site version 1.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | 6dbdfadfd046c1d428d90778b682265b97787399b579cf8c236ae782a910255b\n\nDownload\n# Exploit Title: Online Market Place Site v1.0 - Stored Cross-Site Scripting (XSS)\n# Exploit Author: Joe Pollock\n# Date: September 03, 2022\n# Vendor Homepage: https://www.sourcecodester.com/php/15273/online-market-place-site-phpoop-free-source-code.html\n# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/omps.zip\n# Tested on: Kali Linux, Apache, Mysql\n# CVE: CVE-2022-30003 (RESERVED)\n# Vendor: oretnom23\n# Version: v1.0\n# Exploit Description:\n#   Online Market Place Site v1.0 suffers from an authenticated stored Cross-Site Scripting (XSS) vulnerability allowing attackers to register\n#   as a Seller then create new products containing XSS payloads in the 'Product Title' and 'Short Description' fields.\n\nTo reporduce:\n\n1. Sign as a Seller (or create an account) then add a product by navigating to 'Products' > 'Add New'.\n\n2. Add an XSS payload (e.g. ) within the 'Product Title' and/or 'Short Description' fields.\n\n3. Click 'SAVE' - the XSS payload(s) will be executed immediately or anytime the product is viewed.\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:25.093791Z"}